CVE-2025-0056CWE-497

Information Disclosure vulnerability in SAP GUI for Java

Medium · published January 14, 2025

CVSS v3.1
6.0
EPSS
0%
Percentile
9.2
In the wild
Unconfirmed
What it is

SAP GUI for Java saves user input on the client PC to improve usability. An attacker with administrative privileges or access to the victim�s user directory on the Operating System level would be able to read this data. Depending on the user input provided in transactions, the disclosed data could range from non-critical data to highly sensitive data, causing high impact on confidentiality of the application.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00199 · 9.2th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2025-01-14T00:08Z
EPSS history
Timeline
  • 14 JAN 00:08Z
    Information Disclosure vulnerability in SAP GUI for Java
    cvelistv5